$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: hEM+3DnoXOr2gXnABaST1piYPD89KFEk87MUArrLTJ0= Subject key identifier: 97:24:05:FD:8B:72:8E:C3:AC:86:EB:8B:4C:90:B0:6A:EE:C7:E7:4E Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 0162 Signing time: Wed 05 Nov 2025 04:09:33 +0000 Manifest this update: Wed 05 Nov 2025 04:09:33 +0000 Manifest next update: Wed 12 Nov 2025 04:09:33 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: /z1RYsxzd+LfjpsWH9ohKF+L7x/reMoJvyz0V1Bhq8k=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: Nov 5 04:09:33 2025 GMT Not After : Nov 12 04:09:33 2025 GMT Subject: CN=690acdfd-a41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:5a:6e:fb:93:6a:38:30:9d:86:0d:6f:44: 70:2d:57:f5:d3:56:57:ef:14:ab:b7:e7:70:0b:19: cb:6a:a1:e0:01:a7:8f:cb:37:94:b2:e3:80:c7:8a: b4:45:63:e4:35:56:9f:9b:24:bd:07:49:72:98:68: 62:8f:db:d9:7b:33:20:cb:f9:18:0d:03:c8:bf:fe: be:83:62:c5:ee:5a:e1:07:24:17:32:ba:09:85:e3: 6a:73:9a:55:76:51:58:d4:60:88:87:95:c8:f6:db: 34:4f:d4:34:a2:a6:21:cc:ea:3c:22:25:fc:72:34: 92:6e:1a:56:e0:8f:ed:3b:51:50:1b:24:53:5e:c5: cc:e5:2d:f1:82:35:a3:d6:ed:0c:e7:13:f5:8d:63: fe:ca:b8:80:ec:2f:a4:ce:8d:00:8a:78:02:cd:84: ed:59:a9:37:21:df:d3:9f:4d:2f:d4:06:73:83:c2: b1:33:60:d6:65:01:c2:9b:0d:61:16:ba:2a:f1:99: b9:43:b8:a0:48:90:77:54:79:5b:7d:c3:32:78:b3: 54:41:7b:61:03:e9:17:46:c5:04:2b:58:60:71:60: 03:60:1a:4d:11:c5:9b:fb:7e:f9:0c:0d:a3:be:26: cf:65:c5:c8:db:d3:c6:c1:5f:0a:8f:53:1e:88:cd: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:05:FD:8B:72:8E:C3:AC:86:EB:8B:4C:90:B0:6A:EE:C7:E7:4E X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8d:5d:ac:62:9b:0f:8c:eb:ab:95:30:85:6f:2d:dd:ea:00: 26:39:94:bf:90:52:b1:2a:3f:e4:6f:d9:97:50:db:d6:f0:81: 5a:d4:ba:76:ba:4f:aa:cc:a5:6b:c5:c0:e5:e2:f6:d1:ac:f3: 6b:25:f2:e6:ac:06:d4:c5:a2:f4:d9:0f:a4:aa:a4:92:d7:53: ab:0f:30:44:92:c3:9c:0a:c9:4b:1a:7b:29:31:05:01:80:2d: d5:b6:73:83:32:a2:8e:fd:ae:16:0b:32:ad:dd:d6:47:8d:a3: c0:7b:c2:da:a7:c3:12:db:0b:08:12:ed:ff:ed:b8:e0:a9:4b: 21:c4:ec:b5:7e:d7:0d:82:30:15:73:9c:f9:ec:ca:7e:53:a7: 15:b7:d3:04:f2:c5:1a:ea:fa:17:63:d3:b7:97:17:38:83:8e: 95:f7:b6:ca:ad:62:38:3e:80:a9:3c:28:4f:16:03:5e:d7:c6: ce:48:c3:f4:44:4f:7f:6e:81:93:6f:ba:53:6c:92:b7:57:2c: ee:8a:c5:26:63:10:83:2f:40:fc:40:bf:1d:b4:3b:64:14:15: 8a:0f:08:fc:9a:cb:ff:ae:cd:60:89:96:b2:fb:2b:5e:d9:39: e9:34:e9:13:e7:ed:08:d2:59:d9:0c:b7:d2:cc:33:95:de:db: 90:4c:94:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4 OEExOTAwNjAwHhcNMjUxMTA1MDQwOTMzWhcNMjUxMTEyMDQwOTMzWjAYMRYwFAYD VQQDEw02OTBhY2RmZC1hNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK1abvuTajgwnYYNb0RwLVf101ZX7xSrt+dwCxnLaqHgAaePyzeUsuOAx4q0 RWPkNVafmyS9B0lymGhij9vZezMgy/kYDQPIv/6+g2LF7lrhByQXMroJheNqc5pV dlFY1GCIh5XI9ts0T9Q0oqYhzOo8IiX8cjSSbhpW4I/tO1FQGyRTXsXM5S3xgjWj 1u0M5xP1jWP+yriA7C+kzo0AingCzYTtWak3Id/Tn00v1AZzg8KxM2DWZQHCmw1h Froq8Zm5Q7igSJB3VHlbfcMyeLNUQXthA+kXRsUEK1hgcWADYBpNEcWb+375DA2j vibPZcXI29PGwV8Kj1MeiM3HpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJckBf2L co7DrIbri0yQsGrux+dOMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3 RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBijV2sYpsPjOurlTCFby3d6gAmOZS/kFKxKj/kb9mXUNvW8IFa1Lp2 uk+qzKVrxcDl4vbRrPNrJfLmrAbUxaL02Q+kqqSS11OrDzBEksOcCslLGnspMQUB gC3VtnODMqKO/a4WCzKt3dZHjaPAe8Lap8MS2wsIEu3/7bjgqUshxOy1ftcNgjAV c5z57Mp+U6cVt9ME8sUa6voXY9O3lxc4g46V97bKrWI4PoCpPChPFgNe18bOSMP0 RE9/boGTb7pTbJK3VyzuisUmYxCDL0D8QL8dtDtkFBWKDwj8msv/rs1giZay+yte 2TnpNOkT5+0I0lnZDLfSzDOV3tuQTJTm -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:54 2025 by rpki-client